Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JcQzP42EQyxpXRk30H5PECPZeas.roa
File: JcQzP42EQyxpXRk30H5PECPZeas.roa (raw, json)
Hash identifier: OMDgR/AKK/RujiL2htoi8mS6rvzhkTkKvQQ5lVypvJg=
Subject key identifier: 25:C4:33:3F:8D:84:43:2C:69:5D:19:37:D0:7E:4F:10:23:D9:79:AB
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018A17A37EDD514A8EA9C720A6569DE6677F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JcQzP42EQyxpXRk30H5PECPZeas.roa
Signing time: Mon 21 Aug 2023 10:28:25 +0000
ROA not before: Mon 21 Aug 2023 10:28:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 88.209.245.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
88.209.195.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
178.210.250.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.63.0/24 maxlen: 24
2.58.168.0/24 maxlen: 24
2.58.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:a3:7e:dd:51:4a:8e:a9:c7:20:a6:56:9d:e6:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 21 10:28:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c4333f8d84432c695d1937d07e4f1023d979ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:52:d5:aa:63:79:9a:eb:0b:1a:0c:81:f7:
ac:6e:f8:6c:d7:63:19:cc:88:77:59:0f:d3:50:8f:
57:77:26:79:10:12:b7:46:47:15:4b:f2:2c:af:74:
45:5a:28:d8:cf:86:a3:57:fe:cb:7b:5f:8c:f0:b0:
97:6f:e9:82:30:48:55:3b:3c:3f:31:e3:39:c9:ed:
d1:51:29:5b:d5:6d:56:79:b1:9e:59:e3:c7:b0:8a:
6e:74:40:4b:94:ec:61:e0:fe:65:2b:ca:aa:40:a9:
f4:c8:c7:68:36:6d:de:ff:a7:a6:6b:22:39:c1:58:
61:f6:64:36:cd:3b:7d:f4:27:a3:de:79:e2:ef:55:
77:3b:64:8a:8e:a7:6e:fe:49:27:d0:ea:b5:99:b4:
42:cd:79:e3:6a:16:82:1c:ba:bc:cc:8c:37:ad:78:
f5:dd:c3:78:93:f1:48:f8:b3:40:46:55:fc:ad:38:
6b:0b:ee:3a:0f:ea:6d:05:bf:bb:7e:fc:db:36:89:
3e:4c:93:1d:d4:cd:1d:56:84:dc:53:e1:6d:ec:f9:
8b:80:22:af:9b:f3:9f:53:77:c9:7a:38:62:46:30:
df:df:49:3e:e1:49:c0:6c:c4:88:25:b0:9d:75:a5:
8d:b8:6c:76:57:30:af:db:b9:6b:00:c7:25:9e:56:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C4:33:3F:8D:84:43:2C:69:5D:19:37:D0:7E:4F:10:23:D9:79:AB
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JcQzP42EQyxpXRk30H5PECPZeas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/24
2.58.170.0/24
77.242.150.0/24
77.242.156.0/24
77.242.159.0/24
83.137.158.0/23
88.151.56.0-88.151.58.255
88.151.63.0/24
88.209.195.0/24
88.209.211.0/24
88.209.217.0/24
88.209.245.0/24
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:21:b1:f4:d1:17:74:cf:d7:a1:0f:c6:31:2a:06:88:34:cd:
fd:e8:9d:b2:95:b1:b8:bd:aa:a4:5d:79:9d:5e:d5:76:fa:e7:
ca:c2:78:5a:ba:bb:d0:45:3f:dc:c8:04:b8:c3:3b:7b:07:dc:
91:ff:3d:11:67:fd:51:0c:15:e0:ea:52:e0:34:b4:ea:ee:9b:
04:fb:14:49:45:59:9c:f5:f3:ea:64:52:c1:97:e0:c7:05:cb:
10:9a:bf:50:f2:5f:aa:18:6c:0c:7e:94:af:cb:9e:e1:26:1d:
d7:43:fb:df:9c:d7:3b:3b:fa:6f:f4:cd:fe:0f:9a:a7:53:d8:
98:b9:06:3e:98:52:c3:00:23:30:6d:b4:95:3f:60:96:36:09:
84:d0:80:bd:7e:b2:ce:39:b6:32:a8:a8:79:64:7a:61:43:63:
f4:f3:9b:a4:b2:21:84:b7:7b:a7:39:82:bc:97:73:22:d0:d1:
1e:7f:36:3e:12:8d:05:bc:cc:a6:38:c4:a8:4d:10:c1:e1:41:
9e:02:dd:ba:66:8d:c9:8f:8e:90:9c:00:17:57:12:57:6a:5a:
a8:85:f3:af:87:79:e1:e0:60:0b:b3:02:4d:94:da:b8:53:ab:
46:0c:ae:c6:03:0c:50:b9:7b:9a:35:97:7e:60:64:38:7a:d4:
d4:ef:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 13:04:23 2023 by rpki-client on console-ams.rpki-client.org